CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-44. 

• After this Amendment: Claims 1-17, 20-27, 29, 31-33 and 35-44. 
Non-Elected, Canceled, or Withdrawn claims herein: Claims 18- 

19, 28, 30 and 34. 

Amended claims: Claims 1, 17, 19-27, 29, and 31-33. 
New claims: None. 



Claims: 

1. (Currently Amended) A method comprising: 
enumerating local credentials and remote credentials in response to 
receiving an event notification , wherein the event notification is at least one of 
the following: 

a session event: 

a logon event: 

a logout event: 

a lock event: 

an unlock event: 

a timer event: 
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a policy application event : and 
synchronizing the local credentials and remote credentials. 

2. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on at least one time-stamp 
associated with the local credentials and at least one time-stamp associated with 
the remote credentials. 

3. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on a comparison of hash values. 

4. (Original) The method of claim 1, wherein synchronizing includes 
error handling. 

5. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the local credentials to a remote credential cache. 

6. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the remote credentials to a local credential cache. 
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7. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the local credentials from a local credential cache. 

8. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the remote credentials from a remote credential cache. 

9. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the local credentials at a local credential cache based 
on at least one of the remote credentials. 

10. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the remote credentials at a remote credential cache 
based on at least one of the local credentials. 

11. (Original) The method of claim 1, further comprising updating a 
list of local credentials. 

12. (Original) The method of claim 1, further comprising updating a 
list of remote credentials. 
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13. (Original) The method of claim 1, further comprising determining 
a state of the remote credentials dynamically. 

14. (Original) The method of claim 1, further comprising maintaining 
a state file for the remote credentials. 

15. (Original) The method of claim 1, further comprising maintaining 
a state file for the local credentials. 

16. (Original) The method of claim 1, further comprising resolving a 
conflict of state between the local credentials and the remote credentials. 

17. (Currently Amended) A computer program product encoding 
computer readable storage media encoded with a computer program for 
executing on a computer system a computer process, the computer process 
comprising: 

enumerating local credentials and remote credentials in response to 
receiving an event notification , wherein the event notification is at least one of 
the following: 

a session event: 

a logon event: 
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a logout event: 
a lock event: 
an unlock event: 
a timer event: 

synchronizing the local credentials and remote credentials via a 
synchronizing module, wherein the synchronizing module: 

sorts the local credentials and the remote credentials into a local 
credential array and a remote credential array respectively and linearly 
compares the local credential array and the remote credential array: and 
stores a state file for conflict resolution, the state file comprising: 
a file version: 

a flag, wherein the flag indicates whether the credential is 
user-protected: and 

a credential state, wherein the credential state comprises: 

last time synchronization module called: 

last time local store changed: and 

last time remote cache changed . 



18. (Original) The computer program product of claim 17 wherein the 



computer process further comprises synchronizing the local credentials and the 
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remote credentials is based on at least one time-stamp associated with the local 
credentials and at least one time-stamp associated with the remote credentials. 

19. (Original) The computer program product of claim 17 wherein the 
computer process further comprises synchronizing the local credentials and the 
remote credentials is based on a comparison of hash values. 

20. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises writing at least one of the local credentials to a remote 
credential cache. 

21. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises writing at least one of the remote credentials to a local 
credential cache. 

22. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises removing at least one of the local credentials from a local 
credential cache. 
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23. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises removing at least one of the remote credentials from a remote 
credential cache. 

24. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises modifying at least one of the local credentials at a local 
credential cache. 

25. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises modifying at least one of the remote credentials at a remote 
credential cache. 

26. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises updating a-Hst the array of local credentials. 



Serial No.: 10/821,603 , 

Atty Docket No.: MSI -1973US "10- ^ 

Atty/Agent: Jason F. Lindh .,,, N ,;«,s,.« ^ 



27. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises updating a-Hst the array of remote credentials. 



28. (Canceled) 



29. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises determining a state of the remote credentials dynamically. 



30. (Canceled) 



31. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises error handling. 



32. (Currently Amended) The computer program product encoding 
computer readable storage media of claim 17 wherein the computer process 
further comprises resolving a conflict of state between the local credentials and 
the remote credentials. 



Serial No.: 10/821,603 , 

Atty Docket No.: MSI -1973US fp t - «ss * , s 

Atty/ Agent: Jason F. Lindh s s< ^ n 



33. (Currently Amended) A system comprising: 
an event handler to receive event notifications; and 
a synchronizing module operatively associated with the event handler to 
synchronize local credentials and remote credentials when the event handler 
receives an event notification and if the local and remote credentials are different 
from one another , wherein the event notification is at least one of the following: 
a session event; 
a logon event: 
a logout event: 
a lock event: 
an unlock event: 
a timer event: 
a policy application event. 



34. (Canceled) 



35. (Original) The system of claim 33, wherein the credentials include 
at least one of the following: an encryption credential, a token, an asymmetric 
key pair, a symmetric key, a digital certificate, an XrML license, an authentication 
credential, an authorization credential. 
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36. (Original) The system of claim 33, further comprising a local store 
manager to enumerate the local credentials for the synchronizing module. 



37. (Original) The system of claim 33, further comprising a remote 
store manager to enumerate the remote credentials for the synchronizing 
module. 

38. (Original) The system of claim 33, wherein the local credentials 
are stored in a local cache. 

39. (Original) The system of claim 33, wherein the local credentials 
are stored in a local cache provided at any number (n) of clients. 

40. (Original) The system of claim 33, wherein the local credentials 
are encrypted using a master key. 

41. (Original) The system of claim 33, wherein the remote credentials 
are stored in a remote cache. 

42. (Original) The system of claim 33, wherein the local credentials 
are stored in a remote cache provided at any number (n) of hosts. 
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43. (Original) The system of claim 33, wherein the remote credentials 
are maintained by a remote directory service. 

44. (Original) The system of claim 33, wherein the remote credentials 
are encrypted. 
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